Privacy Policy

We are Anafore Pte. Ltd., the company that runs the ReferralCandy service. We’re also known as ReferralCandy. Here’s a summary of how we protect your data and respect your privacy.

Who this policy is for

This policy applies to any user of our Site (located at, or Services, including retailers, agents, and others who have an account with ReferralCandy ("Retailers") and customers of Retailers or people referred to Retailers ("Customers").

If you are a Customer of a Retailer who is running a referral program using ReferralCandy, you should also check the privacy policy of the Retailer that the referral program is for.

When we collect data

When you visit our website and use our service

Whenever you interact with ReferralCandy, we collect your data. Sometimes we request you provide us with data, sometimes data about you is collected automatically (we call this "log data").

When you voluntarily submit information to us

We collect data like your email address and name that you voluntarily submit to us (such as registering to use the ReferralCandy service or signing up for a webinar).

Information About Children

ReferralCandy is not intended for or targeted at persons under 16. By using this site, you represent that you are not under the age of 16. We do not knowingly collect information about children under 16. If you believe that we have collected information about a child under 16, please contact us at, and we will delete such information.

Information we collect from third parties

We may receive personal data about you from Retailers providing it directly to us (such as after you have purchased from the Retailer), third parties including partners with which we offer joint marketing activities with or have integrations with, and from publicly available sources such as social media websites that you choose to connect with ReferralCandy

Type of data we collect

Contact details

Your name, email address, social media accounts (when you choose to connect with ReferralCandy), address, telephone number.

Log Data that identifies you

Log Data may include information such as your IP address, browser details, timezone, geolocation information, login details, operating system and version.

Data from Retailer's store

Details about and from the Retailer's store, orders Customers make and tracking data for those orders.

Data on how you interact with ReferralCandy

Usage information about how you interact with ReferralCandy which may include information on clicks, pages visited, actions taken, errors encountered.

How we use the data we collect

We do not sell personal information for commercial purposes

We do not sell your personal data to other organizations for commercial purposes. We only use your data for your referral program. If our service is acquired or merged with another company, your information may be transferred to the new owners so that we may continue to provide our services to you.

We only use your data for reasons that we have a legal basis to do so.

Here’s how we use it:

To run your referral program

Managing different parts of your referral program like logging you into your ReferralCandy dashboard, storing settings and preferences, processing payments, tracking referrals and how Customers use your referral program, inviting Customers to take part, sending you updates about the referral program, hosting and
<span class="text-21-rich-text-13px">Legal basis: Legitimate interests, contract</span>

To improve ReferralCandy

Tracking the experience of using ReferralCandy, testing features, getting feedback, managing landing pages, research and analyzing data including profiling and in some instances using third parties to do this.
<span class="text-21-rich-text-13px">Legal basis: Legitimate interests, contract</span>


Resolving issues via live chat, phone or email support, letting you know about changes to our service and how the referral program is doing
<span class="text-21-rich-text-13px">Legal basis: Contract</span>


Sending emails and messages to you about updates to your referral program, changes to the service, new features, products and services and content
<span class="text-21-rich-text-13px">Legal basis: Legitimate interests, contract</span>

Your privacy choices

You can choose not to provide us with personal data

In instances where you are presented the option of providing us with personal data, you can decline to do so. If you decline to do so, you can still browse our website page, but we will not be able to run a referral program for you.

You are able to turn off cookies in your browser

You can change the settings in your browser to turn off cookies. You can also delete cookies in your browser settings. Note that certain features of our service may not function properly without the aid of cookies.

Opt out of Emails

Merchants and Customers can always opt out of receiving emails from ReferralCandy by following unsubscribe instructions in emails sent by ReferralCandy or by emailing us at

Your rights

You have the following data protection rights:

Right to access information that we have on you

If you request it, we will provide you this information within one month of the request, unless doing so would adversely affect the rights and freedoms of others. We will let you know if we are unable to do so because of that reason.

Right to correct inaccurate personal data

You are able to change personal data (like name, contact information) in your ReferralCandy dashboard. If you want us to correct any other personal data that you aren't able to correct yourself, you can email us at with a request to do so.

Right to object the use of your data for profiling or making automated decisions about you

We use your data to figure out what information is relevant to you to give you a better experience (like using your usage information to determine content of emails sent to you or determining what to show you on your dashboard). We will only do this to provide and improve the ReferralCandy service.

Right to port your data to another service

If you request it, we will hand you a copy of your data in CSV format so you can provide it to another service. We will not do so if the request adversely affects any rights and freedoms of others.

Right to be forgotten by us

You can ask us to delete any personal data that we have about you, provided that it is no longer needed for us to use that data for purposes of your use of ReferralCandy.

Right to lodge a complaint regarding our use of your data

You can address any complaints to the supervisory authority in the Member State of your residence or place of work. Before you do so, please bring it up with us so we can address your concerns.

To exercise any of these rights, please contact us as

How we protect your data

We take data protection seriously. We have a variety of administrative and electronic measures that are designed to protect your personal data against unauthorized access, use or disclosure.

Third parties who process your data

We use third parties to help us to offer and run the referral program for you. When we do this, sometimes we need to share your data with them for their services to work well. The sharing only happens when it is strictly necessary and done so with the safeguards and practices detailed in this privacy policy.

There are also instances where you voluntarily connect third party services to your ReferralCandy account. When you do so, we may need to share your data with them in order to provide you a seamless experience running your referral program.

Customer Information provided to ReferralCandy is also subject to the Retailer's Privacy Policy.

We recommend that you read the privacy policies of the Retailer and third party service providers so you can understand the manner in which your personal information will be handled by them.

Here are the details of our main third-party service providers:

  • Analytics: Google Analytics, Fullstory, Optimizely, Segment, LinkedIn, Facebook, FitSmallBusiness, AdRoll, Twitter, RetargetLinks, Unbounce, Microsoft, Quora
  • Feedback and support:,,, FreshDesk
  • Communication: Mailchimp,, Vero, Sumo, Slack
  • Hosting and infrastructure: Amazon Web Services, Sendgrid, VictorOps, Rollbar, Errorception
  • Payment: Stripe, PayPal
  • Integrations: Shopify, BigCommerce, Mailchimp, ReCharge, Woocommerce, Fomo
  • Audit and Finance: Xero, PromptAudit PAC

How long do we store your data

We keep your data as long as you're using ReferralCandy, and in backups after you've stopped using ReferralCandy for up to 6 months.

Where do we store your data

Your data is stored through Amazon's databases on a secure server behind a firewall. We might transfer and store the data we collect from you somewhere outside the European Economic Area (‘EEA’). People who work for us or our suppliers outside the EEA might also process your data.

How we respond to Do Not Track (DNT)

Because there is no legal or industry standard at this time, we do not respond to "DNT" signals. We are closely monitoring the work of the privacy community to determine when such a response is appropriate and what form it should take.


We use cookies when you interact with ReferralCandy. You can always choose to block cookies using your browser settings. ReferralCandy and third parties that we use set cookies whenever you interact with ReferralCandy. These cookies may be session cookies which are deleted when you leave ReferralCandy, or persistent cookies which do not delete themselves and enable us to recognize you when you return so we can provide a better experience for you.

Here’s our full cookie policy:

On the friend landing page and widget in particular, the cookie policy is determined by the Retailer and is not covered by the cookie policy linked above.

Changes to this Privacy Policy

We reserve the right to modify this privacy policy at any time, so please review it frequently. Changes and clarifications will take effect immediately upon their posting on the website. If we make material changes to this policy, we will notify you here that it has been updated, so that you are aware of what information we collect, how we use it, and under what circumstances, if any, we use and/or disclose it.

How to contact us

If you have any questions regarding this Privacy Policy, please contact us by emailing

<p class="text-21-rich-text-13px">Effective as of December 6, 2019</p>